Examples of replaceSession()

Examples of com.gitblit.wicket.GitBlitWebSession.replaceSession()

93
94
95
96
97
98
99
100
101
102
103
    UserModel user = app().authentication().authenticate(httpRequest);

    // Login the user
    if (user != null) {
      // issue 62: fix session fixation vulnerability
      session.replaceSession();
      session.setUser(user);

      // Set Cookie
      WebResponse response = (WebResponse) getRequestCycle().getResponse();
      app().authentication().setCookie(response.getHttpServletResponse(), user);
View Full Code Here

Examples of com.gitblit.wicket.GitBlitWebSession.replaceSession()

244
245
246
247
248
249
250
251
252
253
254
  private void loginUser(UserModel user) {
    if (user != null) {
      // Set the user into the session
      GitBlitWebSession session = GitBlitWebSession.get();
      // issue 62: fix session fixation vulnerability
      session.replaceSession();
      session.setUser(user);

      // Set Cookie
      if (app().settings().getBoolean(Keys.web.allowCookieAuthentication, false)) {
        WebResponse response = (WebResponse) getRequestCycle().getResponse();
View Full Code Here

Examples of com.gitblit.wicket.GitBlitWebSession.replaceSession()

94
95
96
97
98
99
100
101
102
103
104
      // preserve the authentication type across session replacement
      AuthenticationType authenticationType = (AuthenticationType) request.getSession()
          .getAttribute(Constants.AUTHENTICATION_TYPE);

      // issue 62: fix session fixation vulnerability
      session.replaceSession();
      session.setUser(user);

      request.getSession().setAttribute(Constants.AUTHENTICATION_TYPE, authenticationType);

      // Set Cookie
View Full Code Here

Examples of com.gitblit.wicket.GitBlitWebSession.replaceSession()

271
272
273
274
275
276
277
278
279
280
281
      // Set the user into the session
      GitBlitWebSession session = GitBlitWebSession.get();

      // issue 62: fix session fixation vulnerability
      session.replaceSession();
      session.setUser(user);

      request = ((WebRequest) getRequest()).getHttpServletRequest();
      response = ((WebResponse) getResponse()).getHttpServletResponse();
      request.getSession().setAttribute(Constants.AUTHENTICATION_TYPE, AuthenticationType.CREDENTIALS);
View Full Code Here

Examples of org.apache.wicket.Session.replaceSession()

407
408
409
410
411
412
413
414
415
416
417
        if(message != null && !message.matches("^\\s*$"))
        {
            // Invalidate current session and create a new one.
            // We need a new session because otherwise our feedback message won't "stick".
            Session session = Session.get();
            session.replaceSession();
       
            // Add localized "you have been logged out" message to session
            session.info(message);
        }
    }
View Full Code Here
TOP
Copyright © 2018 www.massapi.com. All rights reserved.
All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.